Medium WID-SEC-2025-2084 1 CVE

Aruba ClearPass Policy Manager: Schwachstelle ermöglicht Cross Site Scripting

Published Sep 17, 2025 · Updated Sep 17, 2025 · de-DE

Vendor: Aruba Product: ClearPass Policy Manager Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Aruba ClearPass Policy Manager ausnutzen, um einen Cross Site Scripting Angriff durchzuführen.

Product

Aruba ClearPass ist eine Netzwerk-Zugangskontrolllösung.

Vulnerabilities 1

Medium 6.1

CVE-2025-37122

Unauthenticated Reflected Cross-Site Scripting

A vulnerability in the web-based management interface of network access control services could allow an unauthenticated remote attacker to conduct a Reflected Cross-Site Scripting (XSS) attack. Successful exploitation could allow an attacker to execute arbitr…

Hewlett Packard Enterprise (HPE) HPE Aruba Networking ClearPass Policy Manager

Sep 17, 2025

Revision history

2025-09-17 #1
Initiale Fassung

References

https://www.cvedetails.com/cve/CVE-2025-37122/ vom 2025-09-17
https://www.cvedetails.com/cve/CVE-2025-37122/